To deactivate an AP, set its corresponding entry in the AP table to 'inactive' or delete the entry from the table. In the AP, the WLAN modules in managed mode are switched off and the corresponding SSIDs are deleted.
An AP deactivated in this way remains connected to the WLC and the certificates are retained. The WLC can reactivate the AP and its managed-mode WLAN modules at any time simply by activating the entry in the AP table or by making a new entry in the AP table along with the appropriate MAC address.
If the connection to a deactivated AP is broken (either unintentionally due to a failure or intentionally by the administrator) then the AP begins a new search for a suitable WLC. Although the former WLC can check the validity of the certificate, due to the fact that there is no (active) entry in the AP table the AP treats it as a secondary WLC. If the AP finds a primary WLC then it will register with it.